CVE-2026-115958

MediumCVSS 5.3

Published: 26/10/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

24th percentile - higher than 24% of all known CVEs

Summary

The WP Discussion Board WordPress plugin contains a missing authorization vulnerability allowing exploitation of incorrectly configured access control levels. The issue affects versions up to and including 2.6.0.

Risk Assessment

An attacker could access functionality or data they should not be authorized to reach, potentially leading to unauthorized modifications or information disclosure.

Recommendation

Update the WP Discussion Board plugin to a version later than 2.6.0.

Other vulnerabilities in WP Discussion Board

CVE-2026-115957Medium
The WP Discussion Board plugin has a stored Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation. The issue affects versions up to and including 2.6.0.

Original NVD description (English source)

Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Discussion Board: from n/a through 2.6.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS